Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
File:                     FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer (raw, json)
Hash identifier:          SEisRs8I868fuOR04/HrPuHmkseOYWn/C1fQMkDJGOw=
Subject key identifier:   FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1507D5615B65083A24BDEB1B2C98FB5254A79E17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 13:04:20 +0000
Certificate not after:    Mon 25 Mar 2024 13:09:20 +0000
Subordinate resources:    AS: 264163
                          IP: 138.97.112.0/22
                          IP: 2804:2374::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:07:d5:61:5b:65:08:3a:24:bd:eb:1b:2c:98:fb:52:54:a7:9e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 13:04:20 2023 GMT
            Not After : Mar 25 13:09:20 2024 GMT
        Subject: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fc:e2:6c:f8:2d:de:ad:8b:79:20:55:28:71:
                    69:4a:06:fc:2e:95:3d:aa:04:a6:25:15:d6:59:4d:
                    6e:01:d7:d5:3c:3e:46:d9:78:14:ad:08:09:56:85:
                    d5:4d:35:22:05:48:82:b8:db:d7:46:a5:fd:4a:40:
                    d2:d4:4f:24:df:0a:fc:2d:16:0f:63:5b:be:89:f4:
                    38:a8:66:71:f9:fc:40:bb:0a:8f:3b:07:8d:d2:41:
                    c6:eb:04:f4:23:3d:81:93:50:aa:92:a1:f3:4b:6e:
                    1d:49:71:84:61:ea:4e:a8:86:9b:b9:03:47:e9:74:
                    45:0b:3d:da:10:da:a9:37:5c:a0:fe:3d:e2:16:9e:
                    44:06:4a:0a:42:82:82:f2:d9:eb:68:49:6d:2c:62:
                    1f:96:66:d4:9f:eb:d3:f5:7b:8e:4f:87:00:c4:6f:
                    30:53:ab:bb:fb:2e:9c:86:f6:c8:d6:a5:c5:25:95:
                    8e:ba:d4:8a:51:4a:ef:47:10:37:39:e7:3d:ec:3a:
                    95:1b:37:dd:51:f1:81:48:2b:af:64:62:7b:e8:ee:
                    b3:69:1e:b4:1a:a3:93:47:de:ce:46:fa:7f:5e:02:
                    85:dd:77:a9:db:2e:cb:43:1d:32:48:31:11:23:64:
                    3d:fc:9a:dc:6d:be:8e:4b:26:f2:57:2e:0c:8f:d8:
                    fa:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22
                IPv6:
                  2804:2374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264163

    Signature Algorithm: sha256WithRSAEncryption
         b0:db:89:13:b0:3b:9d:97:99:34:73:40:81:a5:98:44:06:f9:
         a6:cb:e4:2c:56:07:aa:fb:f8:8f:29:f4:10:c3:ac:73:79:a1:
         7a:71:58:fe:93:3a:6b:db:74:f7:ed:ed:84:0c:d4:93:76:22:
         41:1a:5e:a2:d6:e7:aa:af:45:7e:99:4a:e2:8f:06:13:8a:20:
         78:0d:15:01:e2:b0:fd:f4:49:24:b6:86:7b:03:e0:fa:3e:57:
         bf:89:6a:9d:68:9f:77:69:7c:43:00:3b:87:1b:0e:4f:c2:98:
         05:92:f9:e6:29:c9:66:9b:a7:92:f0:e1:7b:fb:6e:a6:9c:6b:
         06:f2:9d:fe:17:8b:f8:3a:27:70:2b:d5:a1:66:b7:dc:7a:5a:
         06:80:cd:8b:dc:60:4d:22:61:f0:63:3b:bc:b1:b6:b9:e0:a7:
         a0:ad:6d:97:6a:57:bb:c8:3f:e7:02:fe:73:07:40:3a:ac:11:
         1c:44:93:6e:81:f3:8f:73:ee:e7:70:eb:33:13:25:69:19:52:
         15:05:d5:f0:62:d4:3b:e3:82:8e:82:9d:55:e1:0d:d8:d2:e6:
         4d:0e:e6:fc:91:ae:38:9e:21:b7:0b:dd:dc:94:08:a5:d2:93:
         3a:3b:22:73:bc:17:92:6a:fd:75:1b:0e:df:10:58:cc:10:f4:
         2b:f7:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:37 2024 by rpki-client on console-fra.rpki-client.org